A company's IT Security team is performing an audit of the AWS environment to determine which servers need to be patched and where additional security controls need to be added. The company is responsible for which of the following? (Choose two.)
A.
Patching the OS on Amazon RDS instances
B.
Patching the OS on Amazon EC2 instances
C.
Enabling server-side encryption with Amazon S3-Managed Keys (SSE-S3) on S3 objects
D.
Patching the database engine on RDS instances
E.
Patching PHP in an AWS Elastic Beanstalk managed EC2 application
B. Patching the OS on Amazon EC2 instances: The company is responsible for maintaining and patching the operating system (OS) running on their Amazon EC2 instances. This includes applying security updates, bug fixes, and other patches to ensure the instances are secure and up to date.
D. Patching the database engine on RDS instances: The company is responsible for patching the database engine running on their Amazon RDS instances. This includes keeping the database software up to date with the latest security patches and updates provided by the database engine vendor.
CORRECT answer B & C
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/security-data-protection-encryption.html
Elastic Beanstalk doesn't turn on default encryption for the Amazon S3 bucket that it creates.
This means that by default, objects are stored unencrypted in the bucket (and are accessible only by users authorized to read the bucket).
If your application requires encryption at rest, you can configure your account's buckets for default encryption.
Amazon RDS is Managed services patch OS and Database
Which of the following is NOT a responsibility of the business?
So it's asking which services we (as a business) do not have to patch.
Answer A+E as this will take care by AWS
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
mukeshs
Highly Voted 3 years agosen12
Highly Voted 2 years, 12 months agoalbert_kuo
Most Recent 1 year, 3 months agoLalo
6 months, 1 week agoFinger41
2 years, 3 months agoshaZ
2 years, 3 months agoFHU
2 years, 8 months agoTroyMcLure
2 years, 11 months agoAWS_Noob
2 years, 11 months agoezat
2 years, 12 months agoPhilipAWS
2 years, 12 months agosaumenP
3 years agoYashBindlish
3 years ago